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ELECTRONIC SOFTWARE LICENSE WITH SOFTWARE 
PRODUCT INSTALLER IDENTIFIER 

■J FIELD OF THE INVENTION 

11 10 The present invention generally relates to providing tools to 

I J reduce software piracy. More particularly, the present invention relates to an 
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« electronic software license having an installer identifier that restricts the use 
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j : £ of the software license to a particular software product. 
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}: 15 BACKGROUND OF THE INVENTION 

The distribution of software products exposes software 
manufacturers to an increased risk of software piracy. Because software 
products are generally distributed on some tangible media, such as a 
compact disk (CD), a software purchaser must be generally able to duplicate 
20 a software product from the media onto the purchaser's hard drive to 
properly use the software. Usually, a software product purchaser purchases 
only a license to use the software on a single computer (machine). 
Unfortunately, it can be difficult to limit the single-computer license 
purchaser to making only a single copy for the purchaser's single-computer 




use. Often, the purchaser will duplicate the software for use on other 
computers. Criminals will even duplicate the software for re-sale to others. 

In an effort to reduce software piracy, various attempts have 
been made to limit the ability of users to duplicate software. In one 
5 approach, software is distributed with a printed password associated with the 
product packaging (e.g., printed on a CD case). The printed password 
corresponds to a stored password that is encoded into the software. When a 
user duplicates the software onto a hard drive, the user is prompted to input 
the printed password before the duplicated software will run for the first 
□ 10 time. The input password is compared to the stored password that is 

f ; nj encoded into the software. The software will be enabled only if a match is 

in 

s - made. Unfortunately, this approach fails to prevent software pirates from 

\ y 

jTi creating illicit duplicates of the software. As long as a software pirate 

P provides a copy of the printed password with each illicit copy of the 

j;!! 15 software, the illicit copies will install and function properly. 

! L s Another attempt to limit the ability of a user to duplicate a 

1,3 

l ,A software product, involves verifying the presence of an electronic software 

license, prior to enabling the execution of the software product. In this 
approach, an electronic license is generated and stored on the user's 

20 computer (e.g., hard drive) when the user attempts an installation of the 
software product. Subsequently, when the user attempts to run (i.e., 
execute) the software product, the software product will not execute if the 
electronic license is not present. However, this approach also has a 
shortcoming: the license can be copied and used with another software 

25 product that uses a similar licensing system. That is, a software pirate could 
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purchase and install one software product and then copy the license from his 
hard drive to be used with other software products. Thus, the installed 
license could be misused to pirate other software products. 

The anti-piracy approaches described above fail to prevent a 
user from using the electronic license provided by installing Product A to 
enable the use of an illicit copy of Product B. Therefore, there is a need in 
the art for an anti-piracy software license that will require a user to generate 
an electronic license to use a software product, but will also prohibit the 
duplication of a license for use with an illicit copy of a separate product. 

SUMMARY OF THE INVENTION 

The present invention meets the above-described needs by 
providing an anti-piracy software licensing system that associates a license 
file with a particular software product, so that the license file cannot be used 
15 with a separate product. The present invention associates the license with 



j:;] one and only one product by adding an Installer Identifier (IID) to the 

l j 

^ license file. The IID is an identification number that is used to identify a 

software product by characterizing the media on which the software product 
originally resides. The IID may be generated by "hashing" the files on the 
20 media containing a particular software product or by any other means for 
associating the IID with the particular, licensed software product. 

At set-up, a set-up or installation program can be executed to 
install the software product. The set-up program requires that a user enters a 
product key associated with the software media (e.g., printed on a label on 
25 the media). Once the user has entered the correct product key, the set-up 



program will transfer the required run-time files and the license file on the 
media from the software media to the user's hard drive. The set-up program 
will then generate the IID based on a characteristic of the media and will 
check the generated IID against the IID stored in the license file on the same 
media. A match will verify that the license file on the media (i.e., the media 
license file) was not tampered with prior to installation and that the license 
file was intended to be used with the software product on the media. If there 
is a match, the media license file and a hardware identifier (HWID), 
identifying the computer on which the software is being installed, are stored 
in a hardware signature file. However, if there is not a match, then the 
installation will be halted and the user will be informed of the inability to 
install the software. 

At run-time the locally stored license file (i.e., local license file) 
with the HWID of the local machine is computed and compared with the 
license in the hardware signature file. This is done to verify that local license 
file was not tampered with after installation has been completed. If there is a 
match it is assumed that the local license file is properly associated with the 
installed software product and execution of the software product is enabled. 
If there is not a match, the user will be prompted to repair the software. 

In one aspect of the invention, a method is provided for 
restricting the installation of a software product. An installer identifier is 
generated and compared to a previously stored installer identifier. If the 
generated installer identifier and the stored installer identifier match, a 
license file is stored and a complete installation of the software product is 
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enabled. The license file can be subsequently accessed to enable the 
execution of the completely installed software product. 

In another aspect of the invention, a method is provided for 
restricting the installation and execution of a software product. An installer 
5 identifier is generated and compared to a previously stored installer 
identifier. If the generated installer identifier and the stored installer 
identifier match, a license file is stored and a complete installation of the 
software product is enabled. In addition, execution of the software product 
is enabled, in response to a determination that a proper license file has been 
10 stored. 

In yet another aspect of the invention, a system is provided for 
restricting the installation of a software product. A set-up program generates 
an installer identifier representing a characteristic of the software product 
media containing the software product. The set-up program also compares 

15 the generated installer identifier to a stored installer identifier and enables 
the installation of the software product's run-time files in response to a 
determination that the generated installer identifier matches the stored 
installer identifier. 

The various aspects of the present invention may be more 

20 clearly understood and appreciated from a review of the following detailed 
description of the disclosed embodiments and by reference to the drawings 
and claims. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram illustrating an exemplary operating 
environment for implementing of the present invention. 

Figure 2 depicts an exemplary installation transaction between a 
5 computer and a software product media. 

Figure 3 depicts an installation transaction performed by an 
exemplary embodiment of the present invention. 

Figure 4 depicts an exemplary software product media 
containing a software product that can be protected by an exemplary 
1 0 embodiment of the present invention. 

Figure 5 is a flow chart depicting an exemplary method for 
installing a software product that is protected by a software license and an 
installer identifier. 

Figure 6 is a flow chart depicting an exemplary method for 
15 enabling and disabling the execution of a software product that is protected 
by a software license and an installer identifier. 

DETAILED DESCRIPTION 

In an exemplary embodiment of the present invention, an anti- 

20 piracy software licensing system is provided that associates a license file to a 
particular software product, so that the license file cannot be used with a 
separate product. This embodiment of the present invention associates the 
license with one and only one product by adding an Installer Identifier (IID) 
to the license file. The IID is an identification number that is used to 

25 identify a software product by characterizing the media on which the 



software product originally resides. The IID may be generated by "hashing" 
the files on the media containing a particular software product or by any 
other means for associating the IID with the particular, licensed software 
product. 

5 At set-up, a user can insert the software media and run a set-up 

program. The set-up program will usually require that the user enters a 
product key associated with the software media (e.g., printed on a label on 
the media). Once the user has entered the correct product key, the set-up 
program will transfer the required run-time files and the license file on the 
5 10 media (media license file) from the software media to the user's hard drive. 

The set-up program will then generate the IID based on a characteristic of 
the media and will check the generated IID against the IID stored in the 
license file on the same media. A match will verify that the media license 
file was not tampered with prior to installation and that the license file is 
15 intended to be used with the software product on the media. If there is a 
match, the media license file and a hardware identifier (HWID), identifying 
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i ,r = the computer on which the software is being installed, are stored in a 



hardware signature file. However, if there is not a match, then the 
installation will be halted and the user will be informed of the inability to 

20 install the software. 

At run-time the locally stored license file (i.e., local license file) 
with the HWID of the local machine is computed and compared against the 
license in the hardware signature file. This is done to verify that local license 
file was not tampered with after installation has been completed. If there is a 

25 match it is assumed that the local license file is properly associated with the 



installed software product and execution of the software product is enabled. 
If there is not a match, the user will be prompted to repair the software. 

Exemplary embodiments of the present invention will 
hereinafter be described with reference to the drawings, in which like 
5 numerals represent like elements throughout the several figures. Figure 1 
illustrates an exemplary operating environment for implementation of the 
present invention. The exemplary operating environment includes a general- 
purpose computing device in the form of a conventional personal 
computer 20. Generally, a personal computer 20 includes a processing 
10 unit 21, a system memory 22, and a system bus 23 that couples various 
system components including the system memory 22 to processing unit 21. 
System bus 23 may be any of several types of bus structures including a 
memory bus or memory controller, a peripheral bus, and a local bus using 
|U any of a variety of bus architectures. The system memory includes a read 
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j:^ 15 only memory (ROM) 24 and random access memory (RAM) 25. A basic 

!;2 input/output system (BIOS) 26, containing the basic routines that help to 
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transfer information between elements within personal computer 20, such as 
during start-up, is stored in ROM 24. 

Personal computer 20 further includes a hard disk drive 27 for 

20 reading from and writing to a hard disk, not shown, a magnetic disk drive 28 
for reading from or writing to a removable magnetic disk 29, and an optical 
disk drive 30 for reading from or writing to a removable optical disk 31 such 
as a CD-ROM or other optical media. Hard disk drive 27, magnetic disk 
drive 28, and optical disk drive 30 are connected to system bus 23 by a hard 

25 disk drive interface 32, a magnetic disk drive interface 33, and an optical 
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disk drive interface 34, respectively. Although the exemplary environment 
described herein employs hard disk 27, removable magnetic disk 29, and 
removable optical disk 31, it should be appreciated by those skilled in the art 
that other types of computer readable media which can store data that is 
5 accessible by a computer, such as magnetic cassettes, flash memory cards, 
digital video disks, Bernoulli cartridges, RAMs, ROMs, and the like, may 
also be used in the exemplary operating environment. The drives and their 
associated computer readable media provide nonvolatile storage of 
computer-executable instructions, data structures, program modules, and 
10 other data for personal computer 20. 

A number of program modules may be stored on hard disk 27, 
magnetic disk 29, optical disk 31, ROM 24, or RAM 25, including an 
operating system 35, a set-up program 36, a local license file 38, and a 
hardware signature file 39. Program modules include routines, sub-routines, 
15 programs, objects, components, data structures, etc., which perform 
particular tasks or implement particular abstract data types. Aspects of the 
I'* present invention may be implemented in the form of a set-up program 36 

that can be incorporated into or otherwise in communication with a local 
license file 38. The set-up program 36 generally comprises computer- 
20 executable instructions for setting-up and installing a software product. The 
local license file 38 generally comprises computer-executable instructions 
and/or data enabling the installation and/or execution of a software product 
associated with the license file. The local license file 38 is generally 
accessible to the set-up program 36, but can also be implemented as an 
25 integral part of the set-up program. 
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A user may enter commands and information into personal 
computer 20 through input devices, such as a keyboard 40 and a pointing 
device 42. Other input devices (not shown) may include a microphone, 
joystick, game pad, satellite dish, scanner, or the like. These and other input 
devices are often connected to processing unit 22 through a serial port 
interface 46 that is coupled to the system bus 23, but may be connected by 
other interfaces, such as a parallel port, game port, a universal serial bus 
(USB), or the like. A display device 47 may also be connected to system 
bus 23 via an interface, such as a video adapter 48. In addition to the 
monitor, personal computers typically include other peripheral output 
devices (not shown), such as speakers and printers. 

The personal computer 20 may operate in a networked 
environment using logical connections to one or more remote computers 49. 
Remote computer 49 may be another personal computer, a server, a client, a 
router, a network PC, a peer device, or other common network node. While a 
remote computer 49 typically includes many or all of the elements described 
above relative to the personal computer 20, only a memory storage device 50 
has been illustrated in the figure. The logical connections depicted in the 
figure include a local area network (LAN) 51 and a wide area network 
(WAN) 52. Such networking environments are commonplace in offices, 
enterprise- wide computer networks, intranets, and the Internet. 

When used in a LAN networking environment, the personal 
computer 20 is often connected to the local area network 51 through a 
network interface or adapter 53. When used in a WAN networking 
environment, the personal computer 20 typically includes a modem 54 or 
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other means for establishing communications over WAN 52, such as the 
Internet. Modem 54, which may be internal or external, is connected to 
system bus 23 via serial port interface 46. In a networked environment, 
program modules depicted relative to personal computer 20, or portions 
5 thereof, may be stored in the remote memory storage device 50. It will be 
appreciated that the network connections shown are exemplary and other 
means of establishing a communications link between the computers may be 
used. 

Moreover, those skilled in the art will appreciate that the 
10 present invention may be implemented in other computer system 
configurations, including hand-held devices, multiprocessor systems, 

jj ri 

'« microprocessor based or programmable consumer electronics, network 

j ~ person computers, minicomputers, mainframe computers, and the like. The 

!|, invention may also be practiced in distributed computing environments, 

u 

1:^ 15 where tasks are performed by remote processing devices that are linked 
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!.H through a communications network. In a distributed computing 

P 

t* environment, program modules may be located in both local and remote 

memory storage devices. 

Figure 2 depicts an exemplary installation transaction between a 
20 computer and a software product media. In Figure 2, a hard drive 200 
transmits an installation request to a software product 202. Typically, an 
installation request will constitute an instruction to install the software 
product 202 on the hard drive 200. Often, this is done by executing a set-up 
program that is located on the software product 202. Those skilled in the art 



will appreciate that virtually any means of triggering an installation of a 

software product 202 could be used. 

In response to the installation request, the software product 202 

can transmit a software license to the hard drive 200. The software license is 
5 a security file that can be used to verify that the user is attempting to install 

an authorized copy of the software product. When execution of the installed 

software product is subsequently attempted, the presence of the software 

license on the hard drive can be verified prior to enabling execution. . 

Execution of the installed software product can be disabled in the absence of 
j % 1Q an acceptable software license file. Execution of the installed software 

I * product will be enabled, when the presence of an acceptable software license 

v l is determined. 

As an additional anti-piracy step, the installation transaction 
!; may require the entry of a software product key. The software product key 

p 15 is a password associated with the software product. Installation and/or 

i n subsequent execution of the software product may be disabled, in response 

□ 

l iA to the entry of an incorrect software product key. A software product key is 

often physically associated with the software product, such as by a label 
affixed to the software product media containing the software product. 

20 The installation transaction depicted in Figure 2 can reduce the 

use of illicit copies of software products by disabling those products. 
However, a software anti-piracy system utilizing this transaction is 
susceptible to circumvention. For example, if the software license is 
provided as a license file, the file can be duplicated and used to enable the 

25 execution and/or installation of illicitly duplicated software products. When 
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an illicitly installed software product on a hard drive 200 checks for a license 
file, execution may be inadvertently enabled by the recognized presence of 
an illicitly duplicated license file. Moreover, the license file for one 
software product may be duplicated and used to enable the execution of an 
5 illicitly installed copy of a second software product. 

Therefore, an anti-piracy system utilizing the installation 
transaction depicted in Figure 2 can be improved by limiting the use of a 
license file to enabling the execution of only one software product. 
Embodiments of the present invention so limit the use of a license file, by 
10 associating the license file with at least one characteristic of the software 
product. 

Figure 3 depicts an installation transaction performed by an 
exemplary embodiment of the present invention. As with the installation 
transaction described in connection with Figure 2, the installation transaction 

3 

* 15 depicted in Figure 3 includes the transfer of a software license from a 



software product 302 to a hard drive 300 in response to an installation 
|>& request. However, the installation transaction of Figure 3 also involves the 

transfer of an installer identifier (IID). The IID provides a connection 
between the transferred license file and the software product 302. In an" 
20 exemplary embodiment of the present invention, the IID is an identifying 
characteristic of the software product 302. For example, the IID may be a 
"hash" value representing all of the files on the media containing the 
software product 302 (e.g., a compact disc). A hash value is a well-known 
means for adding or summarizing data to generate a number characterizing 
25 the data. A hash value can be used, for example, for error checking the 



underlying data. It will be appreciated by those skilled in the art that various 
other identifying characteristics of the software product 302 could be used in 
accordance with embodiments of the present invention. 

Figure 4 depicts an exemplary software product media 400 
containing a software product that can be protected by an exemplary 
embodiment of the present invention. The software product media 400 
contains all of the necessary files to execute a software product. The 
software product media 400 also contains a license file 404. As described 
above, the license file 404 can be transferred to a computer to limit the 
execution of the software product. The software product media 400 can also 
include a file list 402 containing a list or a summary of all of the files 
contained by the software product media 400. Alternatively, the file list 402 
could be generated by scanning the software product media 400 and 
compiling a list of the files found thereon. 

In an embodiment of the present invention in which the IID is a 
hash value, the contents of the file list 402 could be processed by a hashing 
algorithm to generate a hash value. The hash value could be transferred as 
an IID along with the license file 404, in order to limit the execution of the 
associated software product to a computer having a copy of the license file 
as well as an accurate record of an IID that matches the hash value of the 
software product media 400. 

By using both the license file 404 and the IID, an embodiment 
of the present invention can be used to disable the execution of a software 
product where the license file and/or the IID do not conform to the 
applicable characteristics of software product media 400. Accordingly, 
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illicit copies of the software product media can be disabled. Execution of a 
software product can be disabled when it is recognized that a license file 
associated with one software product is being used to attempt the execution 
of a separate software product. 
5 Figure 5 is a flow chart depicting an exemplary method for 

installing a software product that is protected by a software license and an 
installer identifier. The method of Figure 5 starts at block 500 and proceeds 
to step 502. At step 502, a set-up program is executed. Typically, the first 
step of the installation of a software product is the execution of a set-up 

a 

Q 10 program. Set-up programs are commonly stored on a software product 

Ul media and are usually executed directly from the software product media. 

* : ; The method of Figure 5 proceeds from step 502 to step 504. At step 504, a 

5 S 
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j j prompt for a software product key is generated. As described above in 

jL connection with Figure 2, the software product key is typically physically 

s - 

|^ 15 associated with a software product media. For example, the software 

M 

product key may be printed on a label that is affixed to a case holding the 
^ software product media. 

The method proceeds from step 504 to decision block 506. At 
decision block 506, a determination is made as to whether the proper product 
20 key was received. If the proper product key was not received, the method 
proceeds to step 510 and ends. Alternatively, the method could at this point 
prompt the re-entry of the product key or could generate a dialog box with 
an explanation that the installation had been stopped in response to an 
incorrect product key. In any case, the method can terminate installation at 
25 step 510 when an incorrect product key has been entered. On the other 




hand, if a determination is made at decision block 506 that the proper 
product key has been received, then the method proceeds to step 508. 

At step 508, all run-time files can be transferred from the 
software product media to a hard drive. For the purposes of the description 
5 of this exemplary embodiment, run-time files are simply those files needed 
to execute the software product on the computer associated with the hard 
drive. The method proceeds from step 508 to step 512. At step 512, the 
license file is transferred from the software product media to the hard drive 
and is stored as the local license file. 

10 The method proceeds from step 512 to step 514. At step 514, 

an installer identifier (IID) is generated. The IID in this embodiment is 
generated based on one or more characteristics of the software product. For 
example, as described in connection with Figure 4, the IID can be a hash 
value corresponding to a file list that is associated with the soft product 

15 media. The method proceeds from step 514 to decision block 516. At 
decision block 516, a determination is made as to whether the generated IID 
matches a stored IID. The stored IID can be stored within the license file 
that is stored on the software product media. Thus, it can be assumed that if 
the generated IID matches the stored IID, then the stored license file 

20 corresponds to the software product contained on the software product 
media from which the generated IID was produced. That is, the match 
verifies that the proper license file is being used to install the software 
product from the software product media. 

If a determination is made at decision block 516 that the 

25 generated IID does not match the stored IID, the method branches to step 



520 and ends. Alternatively, the method could generate a dialog box to 
display an explanation for the terminated installation transaction. If, on the 
other hand, a determination is made at decision block 516 that the generated 
IID matches the stored IID, the method branches to step 518. At step 518, 
5 the license and a hardware identifier are stored in a hardware signature file. 
The hardware identifier can be used to identify the computer that is the host 
of the hard drive on which the software product has been installed. Once the 
license and hardware identifier have been stored, the method proceeds to 
step 520 and ends. Thus, the method of Figure 5 either successfully enables 

10 or disables the installation of the software product. As is described in more 
detail in connection with Figure 6, the license stored in the hardware 
signature file can be used to enable and disable the execution of the installed 
software product. 

Figure 6 is a flow chart depicting an exemplary method for 

15 enabling and disabling the execution of a software product that is protected 
by a software license and an installer identifier. The method of Figure 6 
starts at block 600 and proceeds to step 602. At step 602, an attempt is made 
to execute the software product that has been previously installed on a hard 
drive. The method proceeds to step 604, wherein the local license file stored 

20 on the hard drive is compared with the license stored in the hardware 
signature file. The method then proceeds to decision block 606. 

At decision block 606, a determination is made as to whether 
the local license matches the license stored in the hardware signature file. If 
the local license does not match the license stored in the hardware signature 

25 file, the method branches to step 608. At step 608, a prompt is generated to 



re-install the run-time files on the hard drive or to repair the local license 
file. The method then proceeds to step 610 and ends, thereby disabling 
execution of the software product. Returning to decision block 606, if a 
determination is made that the local license file matches the license in the 
5 hardware signature file, the method branches to step 612. At step 612, 
execution of the software product is enabled. The method then proceeds to 
step 610 and ends. 

By requiring the matching of a generated IID and a stored IID 
as a prerequisite to storing a license in a hardware signature file, an 

10 exemplary embodiment of the present invention verifies that the use of the 
license is restricted to enabling the installation and execution of a particular 
software product. Additionally, by comparing a local license file with the 
license stored in the hardware signature file, an exemplary embodiment of 
the present invention prohibits the execution of illicitly installed software 

15 products. 

Although the present invention has been described in 
connection with various exemplary embodiments, those of ordinary skill in 
the art will understand that many modifications can be made thereto within 
the scope of the claims that follow. Accordingly, it is not intended that the 
20 scope of the invention in any way be limited by the above description, but 
instead be determined entirely by reference to the claims that follow. 



